812 matches found
PHP-Fusion 4.01 - SQL Injection Vulnerability
No description provided by source. Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL...
PHP-Fusion Remote Command Execution Vulnerability
No description provided by source. Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...
PHP-fusion dsmsf (module downloads) SQL Injection Exploit
No description provided by source. ======================================================== PHP-fusion dsmsf module downloads SQL Inj3ct0r Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...
PHP-Fusion 6.0.109 Messages.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
PHP-Fusion 6.0.x News.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19908/info PHP-Fusion is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
PHP-Fusion 6.1.18 Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36171/info PHP-Fusion is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to harvest sensitive information that may lead to further attacks. The following example URIs are...
PHP-Fusion <= 6.1.5 Calendar_Panel Module Show_Event.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23225/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
PHP-Fusion <= 6.01.14 Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...
PHP-Fusion 4.0 Viewthread.PHP Information Disclosure Vulnerbility
No description provided by source. source: http://www.securityfocus.com/bid/12482/info PHP-Fusion is reportedly affected by an information disclosure vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. It is reported that an attacker could leverag...
PHP-Fusion Mod triscoop_race_system (raceid) SQL Injection Vuln
No description provided by source. PHP-Fusion Mod triscoopracesystem raceid Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++ Author : boom3rang webpage : www.khg-crew.ws greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - -=Kosova Hackers Group-= ++++++++++++++++++++++++++++ + Dork...
PHP-Fusion <= 6.01.15.4 (downloads.php) SQL Injection Vulnerability
No description provided by source. =================================================================== PHP-Fusion = 6.01.15.4 downloads.php SQL Injection Vulnerability =================================================================== + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support...
PHP-Fusion 4.01 'readmore.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30680/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit
No description provided by source. / ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a functi...
Download Management 1.00 for PHP-Fusion Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27618/info Download Management for PHP-Fusion is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacker to access...
PHP-Fusion 7.02.05 downloads.php SQL Injection
SQL Injection vulnerability in PHP-Fusion downloads.php orderby Parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
CVE-2013-7375
SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803...
CVE-2013-1803
Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL commands via the 1 orderby parameter to downloads.php; or remote authenticated users with certain permissions to execute arbitrary SQL commands via a 2 parameter name starting with...
Sql injection
SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803...
Sql injection
Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL commands via the 1 orderby parameter to downloads.php; or remote authenticated users with certain permissions to execute arbitrary SQL commands via a 2 parameter name starting with...
CVE-2013-7375
CVE-2013-7375 is an SQL injection in PHP-Fusion 7.02.01–7.02.05 via the user ID stored in a cookie, affecting Authenticate.class.php. It enables remote attackers to execute arbitrary SQL commands. This entry is separate from CVE-2013-1803 and is corroborated by multiple sources in the connected d...